112.196.166.41📋 Copy

# IP Intelligence Briefing: 112.196.166.41/32

Classification: LOW RISK / INFRASTRUCTURE

Date: July 29, 2026

Prepared For: SOC Operations

---

## Executive Summary

IP 112.196.166.41 is a low-risk infrastructure address belonging to DEN Networks Limited (ASN 45184) in Aligarh, Uttar Pradesh, India. The IP shows no active threat indicators, no open services, and minimal operator activity. One neighboring IP in the /24 subnet exhibits elevated risk and warrants monitoring.

---

## Risk Profile

• Overall Risk Score: 15/100 (Low Risk)
• Reputation: Low Risk
• Operator Score: 0.1304 (Minimal)
• Blacklist Count: 0/0 (Not currently blacklisted)
• Provider Score: 0
• Authority Score: 0

---

## Ownership & Geolocation

• Organization: DEN Networks Limited (DEN-IN)
• ASN: 45184 (den digital entertainment pvt. ltd.)
• CIDR Block: 112.196.128.0/18
• Location: Aligarh, Uttar Pradesh, India
• RIR: APNIC
• Network Classification: Provider infrastructure, firewalled/no services detected

---

## Network Activity & Services

• Open Ports: None detected
• HTTP/HTTPS: No service banners or TLS certificates
• DNS: No PTR records, no forward resolution
• Email Auth: No SPF/DMARC records (no hosted domains)
• Service Purpose: Firewalled / No Services

---

## Threat Indicators

• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Campaign Associations: None
• Threat Feeds: Empty
• Abuse Confidence Score: Not applicable (no active threats)

---

## Neighborhood Analysis (112.196.166.0/24)

• Subnet Abuse Density: 0.5 (25%)
• Classification: Mostly Clean
• Total Siblings: 2
• Active Siblings: 0
• Threat Siblings: 1
• Inherited Risk: 2

Notable Neighbor: 112.196.166.26

• Risk Score: 55/100
• Authority Score: 50
• Action: Monitor for coordinated activity

---

## Historical Observations (17 Total Signals)

• Threat Persistence Days: 0
• Observation Count: 1 threat event
• Status: Not Persistently Malicious
• Recent Trends: Stable with low confidence geo-inference

Key Signal History:

• Geo-location inferred from multiple signals with 52% confidence (India)
• One alienvault-otx observation flagged reputation 0 with threats present
• ICMP validation failed (ICMP blocked)

---

## Control Plane Data

• BGP Prefix: 112.196.166.0/24
• Route Stability: False (changes observed)
• DNSSEC Valid: True
• DNSBL Listed: 1/8 lists
• RPKI State: Not available
• IRR Consistency: Not available

---

## Recommended Actions

1. Monitor: The neighboring IP 112.196.166.26 (risk score 55) for potential correlation

2. Allow: No blocking required for this IP; low risk profile

3. Log: Passive traffic logging recommended for baseline analysis

4. Watch: Monitor for any service emergence or port opening activity

---

Analysis Conclusion: This IP represents benign provider infrastructure with no immediate threat. The subnet contains one elevated-risk neighbor that should be monitored for potential lateral activity. No defensive action required at this time.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.